Stud PE v2.6.0.9
*********************************************************************************************************Stud_Pe The Portable Executable editor working status********************
*******************************************************************************************
by ChristiG - CGSoftLabs
NOTE:
Stud_PE started as a personal Study to PE file format, then developed along with eXPressor. Now it handles
PE and PE+ file formats.
Stud_PE does not execute loaded exe in any way, when "looking" at it!
However if someone gives you a file to "look at it" in your Stud_PE, it is advised to not do so, or do it in
a virtual machine; who knows what that PE file may contain and what Stud's vulnerabilities may exploit.
v 2.6.0.9
-dos->header->ep will disassemble the dos stub :) the disassembler will switch to 16bit mode if the pointer
is inside the dos stub;
-some fixes introduced after 2606 (unhandled exceptions when parsing some imports/exports dirs), also in
resources tab; (thanks STRELiTZIA, waliedassar)
v 2.6.0.8
-added back, the support for w95; added installer;
-fixed the cursor not showing over rollup control and "Plugins" menu not showing on on w9x;
一直以前它不更新了
谢谢黑迷离分享哈 PE格式啊,才刚刚看到IMAGE_NT_HEADERS(PE头/f8h){:1_906:} 谢谢 英文版! 谢谢 英文版! 只是没看懂这个是什么东东.... 看看如何吧 这个是什么东东
页:
[1]
2